x/vulndb: potential Go vuln in gitlab.com/gitlab-org/gitlab-pages: CVE-2019-14942

[GoVulnBot]

CVE-2019-14942 references gitlab.com/gitlab-org/gitlab-pages, which may be a Go module.

Description:
An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Cookies for GitLab Pages (which have access control) could be sent over cleartext HTTP.

References:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2019-14942
• JSON: https://github.com/CVEProject/cvelist/tree/f1fd24097d28ee5c831e228816ad90ed98627a02/2019/14xxx/CVE-2019-14942.json
• web: https://about.gitlab.com/blog/categories/releases/
• report: https://gitlab.com/gitlab-org/gitlab-pages/issues/232
• web: https://about.gitlab.com/releases/2019/08/12/critical-security-release-gitlab-12-dot-1-dot-6-released/
• Imported by: https://pkg.go.dev/gitlab.com/gitlab-org/gitlab-pages?tab=importedby

Cross references:

• Module gitlab.com/gitlab-org/gitlab-pages appears in issue x/vulndb: potential Go vuln in "gitlab.com/gitlab-org/gitlab-pages": CVE-2018-19572 #199 NOT_GO_CODE
• Module gitlab.com/gitlab-org/gitlab-pages appears in issue x/vulndb: potential Go vuln in gitlab.com/gitlab-org/gitlab-pages: CVE-2022-1121 #415 EFFECTIVELY_PRIVATE
• Module gitlab.com/gitlab-org/gitlab-pages appears in issue x/vulndb: potential Go vuln in gitlab.com/gitlab-org/gitlab-pages: CVE-2023-0042 #1491 EFFECTIVELY_PRIVATE

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: gitlab.com/gitlab-org/gitlab-pages
    packages:
      - package: n/a
description: |
    An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Cookies for GitLab Pages (which have access control) could be sent over cleartext HTTP.
cves:
  - CVE-2019-14942
references:
  - web: https://about.gitlab.com/blog/categories/releases/
  - report: https://gitlab.com/gitlab-org/gitlab-pages/issues/232
  - web: https://about.gitlab.com/releases/2019/08/12/critical-security-release-gitlab-12-dot-1-dot-6-released/

[gopherbot]

Change https://go.dev/cl/485916 mentions this issue: data/excluded: batch add GO-2023-1729, GO-2023-1728, GO-2023-1727, GO-2023-1723, GO-2023-1721, GO-2023-1720

[gopherbot]

Change https://go.dev/cl/592760 mentions this issue: data/reports: unexclude 75 reports